CVE-2026-90205

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The OCFS2 file system fails to validate active ordinary and append-DIO orphan slots read from dinodes. A corrupted dinode with the OCFS2 ORPHANED FL flag can contain an i orphaned slot value that falls outside the mounted filesystem slot range. Because the ocfs2 validate inode block() function does not check this value, the ocfs2 wipe inode() function may use it to index osb orphan wipes, leading to an out-of-bounds memory access. This issue can result in a slab-use-after-free condition within the ocfs2 get system file inode() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.